Developer · Local MCP server

pkgxray

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

Visit pkgxray's website

What the MCP Registry states

The entry as published to the official MCP Registry (read 2026-10-04), latest version.

Registry name
io.github.adamsjack711-ux/pkgxray
Version
1.0.5
Status
Active
Category
developer
Transport
stdio (local process)
Package
npm
Published
2026-07-29
Updated
2026-07-29
Publisher
adamsjack711-ux (GitHub)
Website
pkgxray.ca/
Repository
github.com/adamsjack711-ux/pkgxray
Source
Registry API entry

Packages

RegistryPackageVersionTransportEnvironment variables
npmruntime: npxpkgxray1.0.5stdioNone declared

How to connect pkgxray

pkgxray runs locally from a Node.js package published to the npm registry: pkgxray version 1.0.5. It speaks MCP over stdio, so the client starts it as a program and talks to it through standard input and output. It needs Node.js; clients usually start it with npx — the usual command is npx -y pkgxray@1.0.5.

In the mcpServers JSON format that many desktop and editor MCP clients read, the entry looks like this (placeholders in angle brackets):

{
  "mcpServers": {
    "pkgxray": {
      "command": "npx",
      "args": [
        "-y",
        "pkgxray@1.0.5"
      ]
    }
  }
}

Derived from the registry entry, not tested here. What the server does, and on what terms, is set by its publisher; check its repository or website before giving it access to your accounts or files. How to add an MCP server to an assistant · Before you connect

More developer servers

All 6,250 →
ServerRunsEndpoint or package
Pizza DeveloperWork management for AI agents: plan Ideas, Batches and Works, keep context, ship Deliveries.Remote · HTTPpizzadeveloper.com
pkgproofVerify an npm package before you install it: advisories, install scripts, typosquats, provenance.Local · stdionpm: @pkgproof/mcp
PkgSeek Linux IntelligenceLinux package, file, command, vulnerability, lifecycle, migration, and repository intelligence.Remote · HTTPapi.pkgseek.com
PkgtruthCatches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.Local · stdionpm: pkgtruth
PlainQuery | MCP DB AgentQuery PostgreSQL databases in plain English — LLM-generated, safety-validated SQL.Remote · HTTPplainquery.in
Plainsight MCPSearch the Plainsight playbook and review code against proven best practices.Remote · HTTPplaybook-mcp.plainsight.pro
PlanetScaleConnect to PlanetScale databases, branches, schema, query insights, and execute SQL.Remote · HTTPmcp.pscale.dev
PlanExeMCP server for generating rough-draft project plans from natural-language prompts.Remote · HTTPmcp.planexe.org